That works very well unless I have multiple simultaneous calls from one IP. In such situation it will be good to check RTP stats per IP and dialed number (to distinct calls) and get results on per-call basis

Comments

Sure, I can change filter to monitor also for port used by SIP session management. The question is how to easily combine tshark's "RTP Streams" output with TO URI extracted from the initial SIP INVITE messages. Basically I need to extend RTP Streams output with TO URI column